Lovable apps expose passport details and more than 200K private messages

Among the 24,664 websites built on the Lovable platform, 30% have database records accessible without login, including 7,403 websites containing email addresses; serious exposure cases include over 80,000 user profiles and 200,000 chat records from a German lifestyle forum, tens of thousands of ticket/sales records for event organizers/restaurants, internal email AI summaries for property management companies, and over 1,000 identity records with passport numbers exposed by service providers.